diff --git a/doc/flatpak-override.xml b/doc/flatpak-override.xml index e2768a42..05c4a800 100644 --- a/doc/flatpak-override.xml +++ b/doc/flatpak-override.xml @@ -223,13 +223,31 @@ - Remove access to the specified subset of the filesystem from - the application. This overrides to the Context section from the + Undo the effect of a previous + FILESYSTEM + in the app's manifest or a lower-precedence layer of + overrides, and/or remove a previous + FILESYSTEM + from this layer of overrides. + This overrides the Context section of the application metadata. - FILESYSTEM can be one of: home, host, host-os, host-etc, xdg-desktop, xdg-documents, xdg-download, - xdg-music, xdg-pictures, xdg-public-share, xdg-templates, xdg-videos, - an absolute path, or a homedir-relative path like ~/dir. + FILESYSTEM can take the same + values as for , but the + :ro and + :create suffixes are not + used here. This option can be used multiple times. + + This option does not prevent access to a more + narrowly-scoped . + For example, if an application has the equivalent of + in + its manifest or as a system-wide override, and + flatpak override --user --nofilesystem=home + as a per-user override, then it will be prevented from + accessing most of the home directory, but it will still + be allowed to access + $XDG_CONFIG_HOME/MyApp. diff --git a/doc/flatpak-run.xml b/doc/flatpak-run.xml index a9c2c947..69df02c9 100644 --- a/doc/flatpak-run.xml +++ b/doc/flatpak-run.xml @@ -366,13 +366,29 @@ - Remove access to the specified subset of the filesystem from - the application. This overrides to the Context section from the + Undo the effect of a previous + FILESYSTEM + in the app's manifest and/or the overrides set up with + flatpak-override1. + This overrides the Context section of the application metadata. - FILESYSTEM can be one of: home, host, host-os, host-etc, xdg-desktop, xdg-documents, xdg-download, - xdg-music, xdg-pictures, xdg-public-share, xdg-templates, xdg-videos, - an absolute path, or a homedir-relative path like ~/dir. + FILESYSTEM can take the same + values as for , but the + :ro and + :create suffixes are not + used here. This option can be used multiple times. + + This option does not prevent access to a more + narrowly-scoped . + For example, if an application has the equivalent of + in + its manifest or as a system-wide override, and + flatpak override --user --nofilesystem=home + as a per-user override, then it will be prevented from + accessing most of the home directory, but it will still + be allowed to access + $XDG_CONFIG_HOME/MyApp.